Shai-Hulud Worm Pivots to Multi-Cloud: intercom-client@7.0.4 Hijacked — 361,000 Weekly Downloads, AWS, GCP, and Azure Credentials Now in Scope

The Shai-Hulud worm campaign has escalated significantly with the compromise of intercom-client@7.0.4, the official Node.js SDK for Intercom's customer messaging platform. This represents the third major npm package hijacked in rapid succession, occurring merely 29 hours after the initial compromises of mbt@1.2.48 and @cap-js/sqlite@2.2.2.

The malicious version was published on May 4, 2026 at 14:41 UTC through a hijacked GitHub Actions OIDC publishing pipeline. This technical detail confirms that the attackers have gained access to CI/CD infrastructure credentials stolen from the victims of the prior two package compromises, enabling automated propagation of the worm across multiple targets.

intercom-client@7.0.4 poses an exceptionally severe risk due to its massive adoption: 361,510 weekly downloads, exceeding the combined download volume of the two previously compromised packages. The worm's expanded scope now includes extraction of cloud credentials across AWS, GCP, and Azure environments, broadening the potential impact from individual organizations to enterprise-scale multi-cloud infrastructure compromise.

This active, ongoing campaign demonstrates sophisticated lateral movement and credential harvesting capabilities, with attackers leveraging stolen CI/CD automation to efficiently compromise high-impact targets in the npm ecosystem.